This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/DsjnP70xJrDmj0g_UlKJTaTYlrE.roa File: DsjnP70xJrDmj0g_UlKJTaTYlrE.roa (raw, json) Hash identifier: dQTLlCPrfnfLcZWl7wxf8pl/h6tKSJhaHDIpDeYdmfQ= Subject key identifier: 0E:C8:E7:3F:BD:31:26:B0:E6:8F:48:3F:52:52:89:4D:A4:D8:96:B1 Certificate issuer: /CN=a38bf8a526da0056d53c729fbcfedb8af1f4849b Certificate serial: 019B7EA54FE2B5EDBFE56007485726B3F1F9 Authority key identifier: A3:8B:F8:A5:26:DA:00:56:D5:3C:72:9F:BC:FE:DB:8A:F1:F4:84:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/DsjnP70xJrDmj0g_UlKJTaTYlrE.roa Signing time: Fri 02 Jan 2026 12:18:41 +0000 ROA not before: Fri 02 Jan 2026 12:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207324 IP address blocks: 195.85.248.0/24 maxlen: 24 195.88.181.0/24 maxlen: 24 195.95.128.0/24 maxlen: 24 195.95.130.0/24 maxlen: 24 2a10:6c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.crl rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:4f:e2:b5:ed:bf:e5:60:07:48:57:26:b3:f1:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a38bf8a526da0056d53c729fbcfedb8af1f4849b Validity Not Before: Jan 2 12:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ec8e73fbd3126b0e68f483f5252894da4d896b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:46:0e:aa:5d:d8:8b:0c:39:87:1d:45:ee:f5: c0:3a:b5:e7:97:49:0b:c8:2e:4c:49:6a:71:12:b8: 7d:87:9c:ee:c9:e1:b9:44:35:ec:12:71:f2:bf:0d: 88:72:44:7a:d9:1f:39:bc:ae:57:89:f1:24:73:e3: a2:2d:bb:81:e3:36:a8:05:cd:d9:b5:24:89:58:75: 83:b8:c7:05:9c:a4:a7:ca:11:5a:d5:c3:5b:e8:0a: ed:b3:01:75:e3:79:e9:ae:16:7d:d3:79:2f:aa:b8: b3:1d:8f:e9:ad:93:78:0b:37:fd:51:86:32:5b:04: 30:e8:0c:da:fd:53:42:54:64:e9:7c:a6:4d:f0:c6: 79:e0:09:2c:a6:df:f4:8b:6c:22:54:c3:03:56:ca: af:38:74:5f:f5:40:75:2c:8f:f0:4b:45:b2:8b:e4: fe:44:91:e3:86:0a:8a:ff:78:e5:f9:c2:94:c1:6f: fd:86:6e:48:bd:77:1c:10:76:89:17:39:db:10:2f: fb:fb:30:91:92:9e:55:2e:0f:ad:44:a7:c3:1f:cc: 1c:9d:cb:3b:88:05:14:98:da:1c:77:db:71:db:26: e9:01:d7:46:93:43:2b:79:11:b0:e9:33:1d:e9:a2: fb:8e:5b:ae:8c:10:67:42:b3:4b:8a:fd:f0:6e:57: 68:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C8:E7:3F:BD:31:26:B0:E6:8F:48:3F:52:52:89:4D:A4:D8:96:B1 X509v3 Authority Key Identifier: keyid:A3:8B:F8:A5:26:DA:00:56:D5:3C:72:9F:BC:FE:DB:8A:F1:F4:84:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/DsjnP70xJrDmj0g_UlKJTaTYlrE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.85.248.0/24 195.88.181.0/24 195.95.128.0/24 195.95.130.0/24 IPv6: 2a10:6c0::/29 Signature Algorithm: sha256WithRSAEncryption 61:d6:30:42:8e:97:2f:e6:17:c2:e4:7a:48:06:dd:9f:19:2a: c5:ad:88:bf:90:6b:64:13:5f:11:ac:13:a9:10:cb:a6:c6:80: 33:5f:49:8e:4d:31:79:e7:6a:0d:f9:79:50:c5:98:da:58:83: bf:ce:4c:a5:45:38:73:ba:1d:9e:17:97:60:95:1d:3a:dc:8c: 0c:af:23:10:d5:61:a6:bc:c6:b3:a8:3d:7b:fc:df:c3:dd:c0: d7:be:56:e2:8b:c2:ff:f8:8e:71:ca:3d:fa:a7:b5:50:ae:b0: c2:65:61:96:43:d9:03:97:4e:99:d7:73:bb:7c:cc:59:94:d8: 79:9e:02:e7:b0:1c:fb:61:ac:26:3f:89:71:02:b1:9f:14:ff: 5f:bd:9c:a2:3a:4e:25:3a:68:87:b2:94:be:98:1b:9b:f6:5b: cb:0a:c2:25:de:18:9c:34:fa:de:a1:83:a7:f2:91:44:2a:28: 1a:bd:ae:95:0e:2e:b5:81:b9:58:16:85:e7:47:d8:16:29:ca: 82:cb:1c:9e:f4:ee:30:04:c5:42:11:6c:bc:80:b4:b3:67:89: d6:f0:87:46:40:5b:d3:0d:c3:52:4b:33:e8:17:c3:62:65:07: 2e:48:0f:71:c4:57:54:7e:25:a5:49:cd:71:cc:e9:41:f1:6d: 6f:70:73:1c -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt+pU/ite2/5WAHSFcms/H5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzOGJmOGE1MjZkYTAwNTZkNTNjNzI5ZmJjZmVkYjhhZjFm NDg0OWIwHhcNMjYwMTAyMTIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWM4ZTczZmJkMzEyNmIwZTY4ZjQ4M2Y1MjUyODk0ZGE0ZDg5NmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkYOql3Yiww5hx1F7vXAOrXnl0kL yC5MSWpxErh9h5zuyeG5RDXsEnHyvw2IckR62R85vK5XifEkc+OiLbuB4zaoBc3Z tSSJWHWDuMcFnKSnyhFa1cNb6ArtswF143nprhZ903kvqrizHY/prZN4Czf9UYYy WwQw6Aza/VNCVGTpfKZN8MZ54Akspt/0i2wiVMMDVsqvOHRf9UB1LI/wS0Wyi+T+ RJHjhgqK/3jl+cKUwW/9hm5IvXccEHaJFznbEC/7+zCRkp5VLg+tRKfDH8wcncs7 iAUUmNocd9tx2ybpAddGk0MreRGw6TMd6aL7jluujBBnQrNLiv3wbldohQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFA7I5z+9MSaw5o9IP1JSiU2k2JaxMB8GA1UdIwQY MBaAFKOL+KUm2gBW1Txyn7z+24rx9ISbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzR2NHBTYmFBRmJWUEhLZnZQN2JpdkgwaEpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZWYxMGEtYmQ1My00NzkzLWIxYTgt NjA0YjQ3MjYxNDc2LzEvRHNqblA3MHhKckRtajBnX1VsS0pUYVRZbHJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kZWYxMGEtYmQ1My00NzkzLWIxYTgtNjA0YjQ3MjYxNDc2 LzEvbzR2NHBTYmFBRmJWUEhLZnZQN2JpdkgwaEpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAw1X4AwQA w1i1AwQAw1+AAwQAw1+CMA0EAgACMAcDBQMqEAbAMA0GCSqGSIb3DQEBCwUAA4IB AQBh1jBCjpcv5hfC5HpIBt2fGSrFrYi/kGtkE18RrBOpEMumxoAzX0mOTTF552oN +XlQxZjaWIO/zkylRThzuh2eF5dglR063IwMryMQ1WGmvMazqD17/N/D3cDXvlbi i8L/+I5xyj36p7VQrrDCZWGWQ9kDl06Z13O7fMxZlNh5ngLnsBz7YawmP4lxArGf FP9fvZyiOk4lOmiHspS+mBub9lvLCsIl3hicNPreoYOn8pFEKigava6VDi61gblY FoXnR9gWKcqCyxye9O4wBMVCEWy8gLSzZ4nW8IdGQFvTDcNSSzPoF8NiZQcuSA9x xFdUfiWlSc1xzOlB8W1vcHMc -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:43 2026 by rpki-client